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CLAIMS 

What is claimed is: 

1 . A method for generating a simple universal hash value, the method 
5 comprising: 

inputting at least one of a plurality of Plaintext blocks into an integrity 
aware encryption scheme using at least one of two secret keys to obtain a 
plurality of Ciphertext blocks; 

computing a Plaintext checksum value from the plurality of Plaintext 
10 blocks; 

processing the plurality of Ciphertext blocks and a third key to obtain a 
Ciphertext checksum; and 

combining the Plaintext checksum and the Ciphertext checksum to 
obtain the simple universal hash value. 

15 

2. A method as defined in Claim 1 wherein the Plaintext checksum, 
the Ciphertext checksum and the universal hash value are all of the same 
size. 

20 3. A method as defined in Claim 2 wherein the size of the first of the 
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plurality of Plaintext blocks Is a multiple of the size of the universal hash 
value. 

4. A method as defined in Claim 3, further comprising computing a 

5 partial sum by taking the exclusive-or sum of the plurality of Plaintext blocks 
and reducing the partial sum to obtain the Plaintext checksum. 

5. A method as defined in Claim 4 wherein reducing the partial sum 
comprises computation of the exclusive-or sum of equal sized segments of 

10 the partial sum. 

6. A method as defined in Claim 3, further comprising: 

reducing the plurality of Plaintext blocks to obtain a plurality of partial 
Plaintext blocks; and 

IS combining the plurality of partial Plaintext blocks using an exclusive-or 

sum to obtain the Plaintext checksum. 

7. A method as defined in Claim 6 wherein reducing the plurality of 
Plaintext blocks comprises the computation of the exclusive-or sum of equal 

20 sized segments of the Plaintext blocks. 
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8. A method as defined in Claim 3 wherein obtaining the Ciphertext 
checl<sum comprises: 

selecting partial Ciphertexts using the third key from each of the 
5 plurality of Ciphertext blocks; and 

combining the partial Ciphertexts using an excluslve-or sum to obtain 
the Ciphertext checksum. 

9. A method as defined in Claim 8 wherein selecting partial 

10 Ciphertexts using the third key from a Ciphertext block comprises the process 
of using the bits of the third key as an index into the Ciphertext block. 

10. A method as defined in Claim 9, further comprising: 

dividing the Ciphertext block into a plurality of equal sized segments; 
IS assigning each one of a plurality of bits from the third key to each of 

the plurality of segments, respectively; 

selecting a single bit from the assigned segment in con'espondence 
with the plurality of bits of the third key; and 

concatenating the plurality of single bits selected from each of the 
20 segments is to obtain the partial Ciphertext. 



YOR920030534US1 (8728-664) 



14 



1 1 . A method as defined in Claim 3 wherein the Plaintext checksum 
and the Ciphertext checksum are combined by an exclusive-or operation to 
obtain the universal hash value. 

5 

12. A method as defined in Claim 3 wherein obtaining the Ciphertext 
checksum comprises: 

obtaining partial checksums using known universal hash functions 
from the third key and each of the plurality of Ciphertext blocks; and 
10 combining the partial checksums using an exclusive-or sum to obtain 

the Ciphertext checksum. 

13. A simple universal hashing apparatus comprising: 

input means for inputting at least one of a plurality of Plaintext blocks 
15 into an integrity aware encryption scheme using at least one of two secret 
keys to obtain a plurality of Ciphertext blocks; 

Plaintext checksum means for computing a Plaintext checksum value 
from the said plurality of Plaintext blocks; 

Ciphertext checksum means for processing said plurality of Ciphertext 
20 blocks and a third key to obtain a Ciphertext checksum; and 
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combination means for combining the said Plaintext checksum and the 
said Ciphertext checksum to obtain the simple universal hash value. 

14. An apparatus as defined in Claim 13 wherein the Plaintext 

5 checksum, the Ciphertext checksum and the universal hash value are each of 
the same size. 

15. An apparatus as defined in Claim 14 wherein the size of the first 
of the plurality of Plaintext blocks is a multiple of the size of the universal 

10 hash value. 

16. An apparatus as defined in Claim 15, further comprising Plaintext 
checksum means for computing a partial sum by taking the exclusive-or sum 
of the plurality of Plaintext blocks and reducing the partial sum to obtain the 

IS Plaintext checksum. 

17. An apparatus as defined in Claim 16 wherein the Plaintext 
checksum means reduces the partial sum by computation of the exclusive-or 
sum of equal sized segments of the partial sum. 

20 
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18. An apparatus as defined in Claim 15 wlierein the plurality of 
Plaintext blocks is reduced to obtain a plurality of partial Plaintext blocks, 
which, in turn, are combined using an exclusive-or sum to obtain the Plaintext 
checksum. 

5 

19. An apparatus as defined in Claim 18 wherein the plurality of 
Plaintext blocks is reduced by computation of the exclusive-or sum of equal 
sized segments of the Plaintext blocks. 

10 20. An apparatus as defined in Claim 15, further comprising means 

for obtaining the Ciphertext checksum by selecting partial CIphertexts using 
the third key from each of the plurality of Ciphertext blocks, and combining 
the partial CIphertexts using an exclusive-or sum to obtain the Ciphertext 
checksum. 

15 

21 . An apparatus as defined in Claim 20 wherein the selection of a 
partial Ciphertext using the third key from a Ciphertext block includes using 
the bits of the third key as an index into the Ciphertext block. 

20 22. An apparatus as defined in Claim 21 wherein: 
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the Ciphertext block is divided into a plurality of equal sized segments; 

each one of a plurality of bits of the third key is assigned to each of the 
plurality of segments, respectively; 

the plurality of bits of the third key are used to select a single bit from 
the assigned segment; and 

the plurality of single bits selected from each of the segments is 
concatenated to obtain the partial Ciphertext. 



23. An apparatus as defined in Claim 15, further comprising an 
10 exclusive-or unit for combining the Plaintext checksum and the Ciphertext 
checksum to obtain the universal hash value. 



24. A program storage device readable by machine, tangibly 
embodying a program of instructions executable by the machine to perform 
15 program steps for generating a simple universal hash value, the program 
steps comprising: 

inputting at least one of a plurality of Plaintext blocks into an integrity 
aware encryption scheme using at least one of two secret keys to obtain a 
plurality of Ciphertext blocks; 
20 computing a Plaintext checksum value from the said plurality of 
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Plaintext blocks; 

processing said plurality of Ciphertext blocks and a third key to obtain 
a Ciphertext checksum; and 

combining the said Plaintext checksum and the said Ciphertext 
5 checksum to obtain the simple universal hash value. 
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